Lucene search
MitreCVELIST:CVE-2012-6540HistoryMar 14, 2013 - 8:00 p.m.
CVE-2012-6540
2013-03-1420:00:00
mitre
www.cve.org
6
The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for IP_VS_SO_GET_TIMEOUT commands, which allows local users to obtain sensitive information from kernel stack memory via a crafted application.
References
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2d8a041b7bfe1097af21441cb77d6af95f4f4680
www.openwall.com/lists/oss-security/2013/03/05/13
www.ubuntu.com/usn/USN-1792-1
www.ubuntu.com/usn/USN-1798-1
github.com/torvalds/linux/commit/2d8a041b7bfe1097af21441cb77d6af95f4f4680
www.kernel.org/pub/linux/kernel/v3.x/patch-3.6.bz2
Related
prion
prion
Design/Logic Flaw
2013-03-15 20:55:00
cve
cve
CVE-2012-6540
2013-03-15 20:55:07
CVE-2012-6138
2022-10-03 16:15:28
debiancve
debiancve
CVE-2012-6540
2013-03-15 20:55:07
nvd
nvd
CVE-2012-6540
2013-03-15 20:55:07
CVE-2012-6138
2013-03-15 20:55:01
ubuntucve
ubuntucve
CVE-2012-6540
2013-03-07 00:00:00
ubuntu
ubuntu
Linux kernel (EC2) vulnerabilities
2013-04-09 00:00:00
Linux kernel vulnerabilities
2013-04-08 00:00:00
Linux kernel (OMAP4) vulnerability
2012-10-09 00:00:00
nessus
nessus
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1798-1)
2013-04-09 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-1792-1)
2013-04-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1798-1)
2013-04-15 00:00:00
Ubuntu: Security Advisory (USN-1792-1)
2013-04-15 00:00:00
Ubuntu Update for linux-ec2 USN-1798-1
2013-04-15 00:00:00
osv
osv
linux-2.6 - several
2013-05-14 00:00:00
debian
debian
[SECURITY] [DSA 2668-1] linux-2.6 security update
2013-05-14 19:14:29
suse
suse
Security update for Linux kernel (important)
2014-04-16 20:04:36